BigFix Compliance features - Patch Management

Usage and Config
1

Hi, I want to know how far can I go the patch management included in my recently installed BigFix Compliance…

  • Can I replace my wsus solution with BigFix Compliance?
  • Or it’s only to patch vulnerabilities found by a check or a checklist?

We are under the initial stage of deployment but want to know more about the patch management feature in Compliance.

Any response will be appreciated.

Hernan

2

Yes, a very common use-case is to use BigFix Compliance as a replacement for WSUS, SCCM, and Red Hat Satellite Server.

The Compliance web interface is mostly for tacking compliance against checklists (CIS, PCI-DSS, USGCB, DISA STIG, etc.) and includes patch and CVE reporting over time.

The Compliance license includes patch management sites, so you would use the Bigfix Console or WebUI to handle patch deployment to your endpoints.

3

Thanks for the response. It helps me a lot.